PT-2018-15334 · Ambit · Ambit Ddw2602+3

Capitan Alfalo · Published 2018-12-23 · Updated 2020-08-24 · CVE-2018-20380

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ambit DDW2600 version 5.100.1009 Ambit DDW2602 version 5.105.1003 Ambit T60C926 version 4.64.1012 Ambit U10C019 version 5.66.1026

Description The issue allows remote attackers to discover credentials. This is achieved via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".

Recommendations For Ambit DDW2600 version 5.100.1009, restrict access to SNMP requests to minimize the risk of exploitation. For Ambit DDW2602 version 5.105.1003, consider disabling SNMP until a patch is available. For Ambit T60C926 version 4.64.1012, avoid using the vulnerable SNMP endpoints until the issue is resolved. For Ambit U10C019 version 5.66.1026, limit network exposure to reduce the risk of remote attacks.

Exploit

Fix

Related Identifiers

CVE-2018-20380

Affected Products

Ambit Ddw2600

Ambit Ddw2602

Ambit T60C926

Ambit U10C019

References · 4

• 🔥 https://misteralfa-hack.blogspot.com/2018/12/stringbleed-y-ahora-que-passwords-leaks.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-20380 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-20380 · Security Note
• https://github.com/ezelf/sensitivesOids/blob/master/oidpassswordleaks.csv · Note